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Abstract. We generalize the group law of curves of degree three by chords and 
tangents to the Jacobi variety of a hyperelliptic curve. In the case of genus 2 
we accomplish the construction by a cubic parabola. We derive explicit rational 
formulas for the addition on a dense set in the Jacobian. 
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r*- 1. Introduction 

The intention of this remark is an explicit description of the group law of hyperelliptic 
curves. It appears that it is possible to generalize the chord and tangent method for 
curves of degree three in a very naive way by replacing points by point groups of g points 
and by replacing lines by certain interpolation functions. 

Explicit descriptions of the group law play a less important role in the history of 
the subject. They appear first in the new literature. Cassels remarked 1983: "I cannot 
even find in the literature an explicit set of equations for the Jacobian of a curve of 
genus 2 together with explicit expressions for the group operation in a form amenable to 
i^. • calculation ..." (cf. pDIH])- Mazur remarked 1986: "... a naive attempt to generalize this 
group structure [of degree 3 curves] to curves of higher degree ( even quartics ) will not 
work." (cf. |S], p. 230). With the development of cryptography arose algorithms for the 
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0\ group law. In 1987 Cantor described the group law of a hyperelliptic curve in the context 
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of cryptography (cf. [H EI)- Later group laws of more general classes of curves were 
O ' described in [HE]. These group laws work step by step and do not allow a visualization. 

In this remark we derive explicit formulas for the group law for the Jacobi variety of a 
"£3 ! curve of genus 2 starting from an interpolating cubic parabola. As the above algorithms 
£h [ perform the reduction in several steps we execute the reduction in only one step. The 
^ case g > 2 can be performed by rational interpolation functions analogously. These 
interpolation functions were first considered by Jacobi in connection with Abel's theorem 
(cf. |5J). Our formulas are much simpler than analogous formulas derived by Theta 
functions in [3 j p. 114-116, 0^]. A different geometric interpretation was given by Otto 
Staude in [TO]. 
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2. Preliminaries 

Consider a hyperelliptic curve C = { (x, y) E C 2 | y 2 = p(x) } U {oo} of genus g where 
p(x) = a x 29+1 + aix 29 + ... + a 2g +i is a complex polynomial with a ^ 0, g > 1 without 
double zeros. C is endowed with the involution (x,y) := (x, —y), oo := oo. The Jacobi 
variety of C is the Abelian group 

Jac{C) = Dtv°{C)/Div p (C), 

where Div°(C) denotes the group of divisors of degree and Div p {C) is the subgroup of 
principal divisors (i.e. the zeros and poles of analytic functions), cf. [9j. We find in every 
divisor class of Jac(C) an unique so called reduced divisor of the form 

n x Px + ... + n m P m - (m + ... + n m )oo, 
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where ri\ + ... + n m < g, Pi ^ Pj, Pj, oo for i ^ j and rii = 1 if Pj = Pi (cf. |9J. We 
remark that — (P — oo) ~ P — oo (*) and Pi + • ■ • + Pf t ~ /ioo (**) if Pi, • • • , P^ are the 
finite intersections of C with an algebraic curve. 
Now we consider the two reduced divisors 

J\ = Pi H hP/n- ft-ioo, J 2 = <5i H h <5/i 2 - ^-200 

with < hi,h 2 < g (in this notation points Pi,Qj can occur repeatedly). Without 
restriction of generality we have r (0 < r < hi, h 2 ) pairs P/^-a,. = Qh 2 -k, k — 0, ■ • • , r — 1. 
Because of P + P ~ 2oo it follows 

Ji + J 2 ~ Pi + • • • + P ftl _ r + Qi + • • • + Q^-r - Oi + /i 2 - 2r)oo. 

In the case hi + h 2 — 2r < g we have already an reduced divisor on the left side. Otherwise 
we consider the interpolation function 

b x p + ••• + &„ 6(a;) 
y = — : =: —-— 

C X g + C\X q 1 h c q c{x) 

(Cf. [5 ) With p = fel+fe2+ /~ 2r - £ , q = h 1+ h 2 -g-2r-2+e where £ ^ thg p&rity Qf ^ + ^ + ^ 

We have p + q + 1 = hi + h 2 — 2r degrees of freedom. We can determine the coefficients 
unique up to a constant factor so that we interpolate the points Pj, Qj (in the case of a 
multiple point P we require a corresponding degree of contact with C). These hi + h 2 — 2r 
points lie on the algebraic curve yc(x) — b(x) = 0. It follows p(x)c 2 (x) — b 2 (x) = 0. On 
the left side we have a polynomial of degree < hi + h 2 — 2r + g. Therefore we obtain 
h-s < g further finite intersections Pi, • ■ • , Rh 3 . With (*), (**) it follows that 

Pi H h R h3 - h 3 oo 

is the reduced divisor for Ji + J 2 . 

It appears that only for g = 1, 2 nonfractional interpolation functions are sufficient. 
Consider the case g = 2. Let Ji = Pi + P 2 — 2oo, J 2 = Qi + Q 2 — 2oo be two reduced 
divisors with Pj 7^ Qj. The interpolation polynomial 

y = b x 3 + bix 2 + b 2 x + b 3 

through the Pj, Qi (possibly with multiplicities) intersects C for bo 7^ in two further 
finite points Pi and R 2 with Pi 7^ P 2 . The result is 

Ji + J2 = R^ + Th- 2oo. 
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Figure 1. (Pi + P 2 - 2oo) + (Qi + Q 2 - 2oo) ~ i?i + R 2 - 2oo 



Remark: In the real case, contrarily to the case g = 1 for g = 2 the reduction of the sum 
of two divisors with real points can give a sum of two complex conjugated points. 

3. Explicit formulas 

We use the construction in order to derive explicit formulas in the case g = 2. We consider 
only the generic case where bo ^ and all Pi, P 2 , Qi, Q 2 have different nonvanishing x- 
coordinates. In this case we have the interpolation polynomial 

y = b{x) = b x 3 + b x x 2 + b 2 x + b 3 = V% II \ X ~_ Xj \ ■ 

i=l j^i \ X i X j) 

For the ^-coordinates of the intersections with the curve y 2 = a x 5 + aix 4 + ... + a 5 we 
obtain 

(box 3 + b\x 2 + b 2 x + b-s) 2 — a x 5 — a\x 4 — ... — a$ = 0. 
For the six intersections it follows 

ao ~ 2&o&i &1 - a 5 

Xi + X 2 + X 3 + X 4 + X 5 + X 6 = , XiX 2 X 3 X 4 X 5 X 6 = -5 — . 

According to Vieta £5 and xq are solutions of the quadratic equation 

X 2 + (Xi + X 2 + £3 + £4 - — rf^-h ff + — = 0. (1) 

b^ bQXix 2 x 3 X4 

Therefore we obtain 

Ri = O5, -^0^5 _ b ^ x l ~ b z x 5 ~ h), R2 = (x 6 , -b x 3 6 - b x x\ - b 2 x e - 63). 



4. Rational formulas 

The group law of the previous section contains a root operation. It is possible to avoid 
roots by the representation of divisors by Mumford and Cantor (cf. [UHI]). We present a 
reduced divisor Pi + P 2 = (xi,yi) + (x 2 ,y 2 ) by the pair of polynomials 

((x - xi)(x - x 2 ), — — —(x - xi) + y\) =: (A(x), B(x)) = (x 2 + ax + (3, jx + 5) 
x 2 — xi 

if x\ 7^ x 2 . A divisor 2Pi = 2(£ 1; yi) has the representation ((x — £i) 2 , p 2 ^ (x — Xi) +yi). 
The divisors of the form D = Pi = (xi,yi) form the so called Theta divisor O. We can 
represent (xi,yi) by the pair (x — Xi,yi). Now we consider the sum 

(A 1 (x),B 1 (x)) + (A 2 (x),B 2 (x)) = (A 3 (x),B 3 (x)). 

The coordinates a,/3,j,5 form a coordinate system on Jac(C) — 0. We show that the 
group law has a rational form in the generic case Nbol3\(3 2 7^ (cf. below for bo, N). 
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We can replace the x it yi of the cubic interpolation polynomial through the aij, ft, ji, 5i 
by a Groebner basis calculation. We insert the expressions for y^ into b(x) and we consider 
the ringC[x, y, ai, a 2 , &i, & 2 ][xi, x 2 , x 3 , x 4 ], the order x\ < X2 < x 3 < x 4 and the ideal 

( (xi - x 2 ){xi - x 3 )(x 1 - x 4 )(x 2 - x 3 )(x 2 - x 4 )(x 3 - x 4 )(y - b(x)), 

«1 + Xi + X 2 , a 2 + X 3 + X 4 , ft - £1X2, ft - #3^4 )■ 

By a computer calculation we find the first Groebner basis element 

{a\ - Ab 1 )(a 2 2 - 46 2 ) ( ((ft - ft) 2 + («i - « 2 )(«ift - e* 2 ft))y - 6(x) ) 

where b(x) is independent from the Xi. We require that the discriminants of A l7 A 2 do 
not vanish. Furthermore we have 

b Q = -^((ft - ft)(7i - 72) + (ari - a 2 )(5i - 5 2 j), 

h = ^((a 2 ft - aift)(7i - 72) + (a 2 - a\ - ft + ft)(5i - <J 2 )), 

&2 = ^(«2ft7i + "ift72 - ai« 2 (ft7i + ft72) + (ft - ft)(ft72 - ft7i) + 

+ (aia 2 (ai - a 2 ) + (aift - a 2 ft))(5i - 5 2 )), 
h = Tf(( a 2 ~ «i)ftft(7i - 72) + a 2 ft^i + a 2 ft5 2 - «ia 2 (ft5i + ft5 2 ) + 

+ (ft-ft)(-ft5i+ft5 2 )) 
where N is the resultant {x\ — x 3 )(xi — x 4 )(x 2 — x 3 )(x 2 — x 4 ) or 

iV = (ft - ft) 2 + («! - a 2 )(«ift - a 2 ft). 

Because of ((TJ) we have 

a 1 \ 2 , / a o — 26 &i s 6| — a 5 

A 3 (x) = x + (-an - a 2 ^ )x + 2 = 

°o O0P1P2 

and 

x - x 6 x - x 5 6(x 8 ) - &(x 6 ) 6(x 6 )x 5 - 6(^5)^6 
5 3 (x) = -(y 5 — h y 6 — - — ) = x 

X§ Xq X§ X§ X5 Xq 

= -(62 + &1X5 + 6iX 6 + 6 ^5 + te^6 + &osjj)jC 

+&3 + + to + M5 + hxl + bix 5 x 6 + b x 3 5 + b x 2 5 x 6 + b x 5 xl + b xl. 
Using a 3 = —x 5 — x 6 and ft = x 5 x 6 we obtain 

B 3 (x) = (-62 + ha 3 - b a 2 3 + b (3 3 )x - b a 3 (3 3 + 61ft - 63. 

Therefore we have the explicit rational group law 

a - 2b h 
a 3 = —a,\ — a 2 — 



0: 



h 2 
°0 

bl - a 5 



^ftft 

73 = -62 + M3 - &o« 3 + b P 3 , 
5 3 = -b a 3 /3 3 + 61ft - b 3 



on the dense set of Jac(C) — 9 with (x 4 — x 2 )(x 3 — x 4 )iV6 ftft 7^ 0. 

Remark: The formulas are also true in the limit X\ — x 2 , x 3 — x 4 . The remaining special 

cases can be treated similar. 
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